[Samba] Strong cryptography for Kerberos available?

[Lars Hanke]

If I query the AD DC I see:

root at samba4:/# ldapsearch -H  ldap://samba.ad.microsult.de -Y GSSAPI 
'(sAMAccountName=mgr)'
SASL/GSSAPI authentication started
SASL username: Administrator at AD.MICROSULT.DE
SASL SSF: 56
SASL data security layer installed.

I would like to see SASL SSF: 112. Does anyone know whether and where 
this can be configured?

Regards,
  - lars.